Privacy Policy

Account information

When you create an account, we collect your name, email address, and payment information. Payment processing is handled by Stripe; we do not store your full payment card details on our servers. If your signup arrived through an ad, a shared link, or an affiliate link, we also record the campaign parameters and referral code it carried, so we know which campaigns bring members to the Lab.

Content you submit

To use The Messaging Lab, you submit information about your business, your voice, your audience, and the copy you want to create. This includes your Messaging Voice & Tone Guide, your Brand Guide, and the prompts you submit to Connect-First AI.

Usage data

We collect information about how you use the platform: which features you use, how often, which copy types the team creates with you. This helps us improve the product and understand what's working. Usage data is collected through our infrastructure providers and analytics tools.

Device and connection data

When you visit the platform, we automatically receive information like your IP address, browser type, operating system, device identifiers, and referring URL. This is standard for web services and helps us secure the platform and diagnose issues.

Communications

If you contact us for support, participate in live Q&A sessions, or communicate with us in any way, we may retain those communications to improve our service.

Our site offers live chats with AI versions of our team members. When you use them:

You are talking with AI, not a person. By chatting, you consent to interacting with AI, and responses may not always be accurate.

We do not ask for or collect your name or email in the chat.

We store the conversation so we can review it for quality and to improve our service. Before anything is saved, we automatically remove obvious personal details such as email addresses and phone numbers, and we store only a one-way hashed version of your IP address, never the raw address, for abuse prevention.

We keep conversation transcripts for up to 30 days, after which they are automatically deleted.

We also create anonymized, attribute-level insights from conversations, such as industry, business stage, revenue range, and common challenges, with personal names and any specific business identity removed. Because these insights do not identify you, we retain them to better understand the people we serve and improve our service.

To provide the chat, your messages are processed by our AI provider, Anthropic, and the chat is protected from automated abuse by Cloudflare Turnstile. These providers process this data on our behalf.

You do not need an account for some parts of our site to collect information. Here is what each one collects and why.

Newsletter

When you join the newsletter, we collect your email address and, if you accepted Analytics on the cookie banner, the first-touch source described in the Cookies section. We use it to send you the newsletter, and every issue includes an unsubscribe link.

Affiliate application

When you apply to the affiliate program, we collect your name, your email address, and your answers to the application questions. They are stored with our leads and emailed to our team inbox so we can run the program and stay in touch with you about it.

Free visibility read

When you request the free visibility read, we collect your email address and the website address you ask about, and we store the report we create. Reports are kept by website address for 30 days, so if someone else asks about the same website within that window, they may be shown the same report. The report reads only what is publicly visible on that website.

Retention and deletion for non-members

We keep what these forms collect for as long as we need it to run the newsletter, the affiliate program, and the free tools. You do not need an account to be removed from any of it: email hello@messaginglab.ai and we will delete your information within 30 days.

To provide the service

We use your information to operate The Messaging Lab, create your copy, maintain your guides, deliver the features in your subscription, and process payments.

To learn what works, without identifying you

Before an account is deleted, and from time to time while it is active, we keep a de-identified record of the work: the kind of offer, the audience, the price range, the messaging and brand direction, the pieces made, the results measured, and how the Lab was used. We remove names, email addresses, phone numbers, links and domains, business names, and any other detail that identifies you, and we do not keep a key that links the record back to you. We use this de-identified information to understand what works for coaches, healers, and service providers, to improve the Lab, and in our own marketing. We do not sell personal information, and we do not use your content to train our AI models.

To communicate with you

We use your email address to send product updates, billing information, security alerts, and, with your permission, educational content and marketing communications. You can unsubscribe from marketing emails at any time.

Legal and safety

We may use your information to comply with legal obligations, enforce our terms, protect our rights, and prevent fraud or abuse of the platform.

What is sent to the AI

When you submit a prompt to Connect-First AI, that prompt, along with relevant sections of your Messaging Guide and Brand Guide, is sent to our AI provider (Anthropic) for processing. This happens in real time and is subject to Anthropic's commercial terms, which prohibit training on customer content.

We do not train AI on your content

Your prompts, your Messaging Guide, your Brand Guide, and the copy the team creates with you are not used to train our AI models or any third-party AI models. Your content is processed to produce your output and is then retained only as described in our Data Retention section.

Your guides are private

Your Messaging Voice & Tone Guide and Brand Guide are stored securely on our servers and used exclusively to personalize your Connect-First AI output. They are not shared with other users or used for any purpose other than creating your copy.

We share limited information with trusted service providers who help us operate the platform. Each is contractually bound to use your information only to provide services to us. Our current providers are:

Stripe

Payment processing. Stripe receives your name, email, and payment card information when you subscribe.

Anthropic

AI processing. Anthropic receives your prompts and relevant sections of your guides to create your copy. Under their commercial terms, they do not train models on this data.

Vercel

Hosting and content delivery. Vercel receives standard web traffic data to serve the platform.

Supabase

Database and authentication. Supabase stores your account information, guides, and copy library.

Resend

Email delivery. Resend handles trial confirmations, billing notifications, account communications, affiliate program emails, and the messages our site forms send to our team inbox.

Vercel Analytics

Aggregate, cookieless traffic measurement on the site. It does not set cookies or follow you across sites.

Microsoft Clarity

Session analytics on the site, including heatmaps and recordings of individual visits. Clarity runs only after you accept Analytics on the cookie banner.

Meta

Ad measurement. After you accept Analytics on the cookie banner, the Meta Pixel reports your visit so we can measure our ads. When you become a paying member, Meta also receives a purchase event carrying a hashed version of your email address and the payment amount, so we can tell which ads become memberships.

Google

Ad and traffic measurement through the Google tag, loaded only after you accept Analytics on the cookie banner.

If you choose to connect your Google account, The Messaging Lab accesses two things, read-only and only with your permission: your Google Analytics data (your website traffic and audience metrics) and your Google Search Console data (your search rankings and performance).

How we use it

We use this only to show you your own growth numbers and recommendations inside the Lab. We do not sell it, share it, use it for advertising, or use it to train AI models. You can disconnect your Google account at any time, which immediately stops all access.

Limited use

The Messaging Lab's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can read that policy at https://developers.google.com/terms/api-services-user-data-policy.

We do not sell your data

We do not sell, rent, or trade your personal information or content to any third party. Ever. The only disclosures we make are to the service providers and measurement partners named in this policy, for the purposes described here.

Legal requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of any person.

Business transfers

If The Messaging Lab is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to how your information is handled.

Active accounts

While your account is active, we retain your account information, your guides, and your copy history so you can access them.

After cancellation

After you cancel, or your trial ends without a paid plan, we keep your account and the work your team made with you so you can pick up where you left off whenever you come back. We do not delete accounts on a schedule. If you want your account deleted, ask from your Account page or by email; our team handles every deletion by hand and confirms it within 30 days. You can download a copy of your data from your Account page at any time.

Requesting deletion

You can ask for deletion at any time from your Account page or by emailing hello@messaginglab.ai. Our team handles every deletion by hand and confirms it within 30 days, unless we are required by law to retain certain information. Before an account is deleted we keep the de-identified record described under How We Use Your Information; nothing in it identifies you.

Depending on where you live, you may have specific rights regarding your personal information. Regardless of location, you have the following baseline rights with The Messaging Lab:

Access

You may request a copy of the personal information we hold about you.

Correction

You may correct inaccurate information directly in your account settings, or contact us for help.

Deletion

You may request deletion of your personal information. Contact us at hello@messaginglab.ai.

Portability

You may request export of your content in a machine-readable format.

Marketing opt-out

You may opt out of marketing communications at any time using the unsubscribe link in any marketing email.

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you additional rights regarding your personal data.

Legal basis for processing

We process your personal data on the following legal bases: (a) performance of our contract with you (to provide the service); (b) your consent (for marketing communications and for the analytics and advertising cookies described in the Cookies section); (c) our legitimate interests (to improve the platform, ensure security, prevent fraud, and record which campaign or referral a signup arrived from); and (d) compliance with legal obligations.

Your GDPR rights

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. You also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, contact hello@messaginglab.ai.

Data Protection Officer

Inquiries about how we handle personal data can be directed to hello@messaginglab.ai.

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you specific rights regarding your personal information.

Your California rights

You have the right to know what personal information we collect, to access it, to delete it, to correct it, to opt out of the sale or sharing of personal information, and to non-discrimination for exercising your rights.

Sale and sharing

We do not sell personal information for money. We do disclose limited information to Meta and Google for ad measurement: after you accept Analytics on the cookie banner, the Meta Pixel and the Google tag described in the Cookies section run in your browser, and when you become a paying member, we send Meta a purchase event carrying a hashed version of your email address and the payment amount. California law may treat these disclosures as sharing for cross-context behavioral advertising, so we give you a way out of both.

How to opt out of sharing

Decline Analytics on the cookie banner, or use the Cookie choices link in the footer, and the Meta and Google tags stay off your browser. To opt out of the purchase measurement event, or to make any opt-out request by email, contact hello@messaginglab.ai and we will honor it.

How to exercise your rights

Contact us at hello@messaginglab.ai. We will respond within 45 days. We may need to verify your identity before processing certain requests.

Categories of information collected

In the past 12 months, we may have collected the following categories: identifiers (name, email, IP address), commercial information (subscription details), internet activity (usage data), and content you provide (prompts, guides, and the copy created with you). Details are described in the sections above.

The Messaging Lab is operated from the United States, and our service providers may process data in the United States and other countries. If you access the platform from outside the United States, your information will be transferred to, stored in, and processed in the United States and other jurisdictions, which may have different data protection laws than your country.

Safeguards

For transfers from the EEA, UK, and Switzerland, we rely on appropriate safeguards including Standard Contractual Clauses with our service providers where required.

Essential cookies

Some cookies are required for the service to work: they keep you logged in, remember your session, and protect the platform from abuse. These are always on.

Analytics and session replay

With your consent, we use Microsoft Clarity to understand how visitors use the site, including heatmaps and recordings of individual sessions. Clarity sets cookies and records sessions only after you accept Analytics on the cookie banner. We also use Vercel Analytics, which is cookieless and measures traffic in aggregate.

Ad measurement

With your consent, we use the Meta Pixel and the Google tag to measure which ads bring visitors to the site. These tags set advertising cookies and send Meta and Google information about your visit. They load only after you accept Analytics on the cookie banner. If you decline, they never load.

Attribution cookie

If you accept Analytics on the cookie banner and arrive through an ad, a shared link, or an affiliate link, we set a first-party cookie named ml_attrib that remembers where your first visit came from: campaign parameters (utm values), ad click identifiers (fbclid, gclid), and any referral code. It lasts 90 days. If you later join the Lab or submit a site form, that first-touch source is stored with your lead or account record so we know which campaigns bring people here. If you decline, this cookie is never set.

Your choices

The cookie banner asks before any analytics or ad-measurement cookie is set, and declining keeps all of them off. You can change your choice at any time with the Cookie choices link in the footer of any page; declining there also deletes the ml_attrib attribution cookie. You can also control cookies through your browser settings, though disabling essential cookies may prevent parts of the platform from working correctly.

We use industry-standard security practices to protect your data, including encryption in transit and at rest, access controls, secure authentication, and regular security reviews. No system is completely secure, but we treat your data with the care it deserves.

Reporting security issues

If you discover a security vulnerability in The Messaging Lab, please report it to hello@messaginglab.ai. We take security reports seriously and will respond within 24 hours.

Breach notification

In the unlikely event of a data breach affecting your personal information, we will notify you and applicable regulatory authorities as required by law, typically within 72 hours of discovery.

The Messaging Lab is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18, and the service is not directed to children. In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect information from children under 13. If you believe a minor has provided us with personal information, contact hello@messaginglab.ai and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated by email to active subscribers and posted at the top of this page with an updated "Last updated" date. Continued use of The Messaging Lab after changes take effect constitutes your acceptance of the updated policy.

Questions about this Privacy Policy, requests to exercise your rights, or any privacy-related inquiries can be sent to hello@messaginglab.ai. We will respond as quickly as possible and within any timeframes required by applicable law.